DMZ zone with PIX 501

[ovs8]

- How do I setup a DMZ zone with PIX 501 firewall? Do I need to use an additional router? I have CISCO 1605 at my disposal.

- If I can't do that, what would be an alterantive way to set an FTP server similarly to the DMZ way.

(We're using IPsec/GRE VPN between our 3 sites. we're on W2K network).

thanks,

oleg

[drolemc]

When talking about setting up a DMZ, a PIX model with atleast three interfces is required. On a PIX 501, only two interfaces are available, an outside interface (ethernet) and an inside interface (availabe as a 4 port switch). For stting up a DMZ, you will need an additional interface and that would mean getting a higher model of the PIX. The idea of using a router on the inside interface and then configuring restrictive policies on it might work but will make the setup messy and you are unlikely to find a satisfactory level of support for it for the simple reason that not many neworks are deployed that way.